Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-29719

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.

Published

2025-04-02T21:15:32.820

Last Modified

2025-04-10T14:27:50.553

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	remyandrade	employee_management_system	1.0	Yes

References

https://github.com/sw8y/vulnerability_research/blob/main/CVE-2025-29719/CVE-2025-29719.md Exploit, Third Party Advisory ([email protected])
https://www.sourcecodester.com/php/17847/employee-management-system-using-php-and-mysql-source-code.html Product ([email protected])